Trusted Third Parties (TTPs) and Certification Service Providers (CSPs) provide trustworthy electronic identification of people and services through the use of digital certificates and electronic signatures. They provide the suitable framework of trust for relations between organizations and countries, and are therefore, key players in the improvement of business processes and competitiveness.
The European Union Directive on the electronic signature and its respective transpositions into the legislation of the Member States lay down the requirements for providing certification services through the regulation and recognition of the authentication and non-repudiation services supplied by Certification Service Providers (CSPs). Safelayer supplies the technology which enables the provision of security and trust services offered by CSPs; Safelayer technology facilitates compliance with the legal requirements, is in line with the Trust Services Principles and Criteria, such as for example WebTrust, and with the CWA 14167-1 requirements for Trustworthy Systems Managing Digital Certificates and Electronic Signatures, in addition to supplying certification that complies with the Common Criteria standard at level EAL4+.
Safelayer solutions enable the deployment of digital certificate issuing and management services (Certification Authority), electronic time-stamping (Time Stamping Authority) or other advanced services (Validation Authority). The KeyOne family of products are used by CSPs in different sectors, such as FNMT-RCM (CA of the Spanish Royal Mint) which manages over 1.2 million digital certificates, or Firma Profesional, a company which provides digital certificates to different professional associations in Spain.
TrustedX, Safelayer's platform for security and trusted services, provides the basis for the deployment of advanced security services offered by CSPs. TrustedX enables CSPs to offer services such as authentication, electronic signature, as well as the custody and management of electronic signatures and ciphered data in an SaaS (Software as a Service) context. These services are consumed as Web services, using SOAP (Service Oriented Access Protocol) or REST (Representational State Transfer), which can be accessed over the Internet by certain professional groups and sectors. Alternatively, these services may be accessed as a key component of other services supplied by the service provider itself.
